Alternatives to pfBlockerNG
A pfSense package that adds IP blocklists, country blocking and DNS blocklists to the firewall. The listings below can replace it for an important use case. Each note says what changes if you switch.
The original
pfBlockerNG
A pfSense package that adds IP blocklists, country blocking and DNS blocklists to the firewall.
Replacements
Listings that take over the same core job as pfBlockerNG.
Pi-hole
A DNS server for your home network that refuses to look up ad and tracker domains, for every device at once.
Pi-hole runs on a separate Linux machine and blocks by DNS only, without the firewall IP lists or country blocking that pfSense provides.
AdGuard Home
Network-wide ad and tracker blocking in a single binary, with encrypted DNS built in rather than bolted on.
AdGuard Home is an open source single binary with a web interface and encrypted DNS serving, but it does no IP or country blocking at the firewall.
OpenWrt adblock
A DNS-based ad and abuse domain blocking package for OpenWrt routers, covering every device on the network.
OpenWrt adblock provides network-wide DNS blocking on OpenWrt routers instead of pfSense firewalls, and is open source with a command-line interface.
Adblock Fast
A lightweight DNS-based ad blocker for OpenWrt routers using dnsmasq, smartdns, Unbound or BIND.
Adblock Fast is an AGPL-3.0 DNS ad blocker for OpenWrt routers with low memory use and optional LuCI interface, lacking IP blocklists.
Diversion
A DNS-based ad blocker that runs on Asus routers with Asuswrt-Merlin firmware.
Diversion performs router-level DNS ad blocking only on Asus routers with Asuswrt-Merlin firmware, without firewall IP or country blocking.
NxFilter
A self-hosted DNS filter with per-user policies, reports and Active Directory integration.
NxFilter is a self-hosted DNS filter with per-user policies, reports and Active Directory integration, aimed at schools and organisations.
Similar software
Related functionality, not a direct replacement.
Unbound
Validating, recursive, caching DNS resolver.
Blocky
Lightweight DNS proxy with blocklists, written for container deployments.
dnsdist
A DNS load balancer that routes queries to backend servers and blocks abusive traffic with rules.
NextDNS
Cloud DNS filtering with per-device profiles and detailed logs.